Configuring Active/Passive in One-Armed-Mode Setup

active/passive is simply a function of the traffic groups. You'll need to define your traffic groups (there's a default one of traffic-group-1) make sure all your vip objects exist in that group, and then set the failover order for that group.

For example:

 list cm traffic-group traffic-group-1
cm traffic-group traffic-group-1 {
    default-device bip1
    ha-order {
        bip1
        bip2
    }
    unit-id 2
}


 modify ltm virtual-address all { traffic-group traffic-group-1 }

Now all the virtuals are in traffic-group-1 and the primary is bip1 and the secondary is bip2.

I prefer to create custom traffic groups rather than utilizing the default (traffic-group-1) there may be cause at some point to separate out things into more traffic groups so you can run active/active if you have load issues down the road (this allows you to horizontally scale, if the need arises).